Security Scan Report: moprf-3331cyura.web.app

Redirected to:
https://de.ihrkosten-gehaltskont-erhalten.shop/?pwd=sg
Page Did Not Load

This page sent visitors on to de.ihrkosten-gehaltskont-erhalten.shop, a domain that does not exist: there was no DNS record for it when we scanned it.

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://moprf-3331cyura.web.app/

Effective URL:
https://de.ihrkosten-gehaltskont-erhalten.shop/?pwd=sg
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

6
Risk Score

Throwaway Firebase subdomain whose only function is redirecting to a deceptive German salary/account lure domain. No forms or malware observed, but the redirect chain and hostname are not trustworthy.

Risk Factors (4)
Randomised throwaway hosting subdomain used purely as a redirect hop to an unrelated domain
Deceptive destination hostname tailored to German-speaking users (salary/account lure) on a .shop domain
Cross-domain redirect to a destination with no available age, ranking or verifiable content
Appended '?pwd=' parameter consistent with a pre-seeded lure/tracking link
Safety Factors (4)
No credential, password or payment fields in the captured page (0 forms)
No Indicators of Compromise matches in threat intelligence
No JavaScript malware (hunting rule) patterns or high-precision native hunting-rule hits
No network-level IDS alerts and no cross-origin credential exfiltration detected
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'moprf-3331cyura.web.app' is registered and includes subdomain 'moprf-3331cyura'. Its registrable label 'web' stretches across 3 characters split between one vowel and 2 consonants. Word splitting yields one word: web. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for de.ihrkosten-gehaltskont-erhalten.shop when we scanned it, so there is no screenshot.

Page Load Overview

2.44s
Total Load Time
1 KB
Total Size

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
31--

Detected Technologies4

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data